Nixpkgs Security Tracker

Login with GitHub

Suggestion detail

Untriaged

Permalink CVE-2025-69368

created 1 month ago

WordPress SOHO - Photography WordPress Theme theme <= 3.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GT3themes SOHO - Photography WordPress Theme soho allows DOM-Based XSS.This issue affects SOHO - Photography WordPress Theme: from n/a through <= 3.0.3.

References

https://patchstack.com/database/Wordpress/Theme/soho/vulnerability/wordpress-so… vdb-entry

Affected products

soho

=<<= 3.0.3

Matching in nixpkgs

pkgs.python312Packages.pyosohotwaterapi

Module for using the OSO Hotwater API

nixos-25.11 1.2.4
- nixos-25.11-small 1.2.4
- nixpkgs-25.11-darwin 1.2.4

pkgs.python313Packages.pyosohotwaterapi

Module for using the OSO Hotwater API

nixos-unstable 1.2.4
- nixpkgs-unstable 1.2.4
- nixos-unstable-small 1.2.4
nixos-25.11 1.2.4
- nixos-25.11-small 1.2.4
- nixpkgs-25.11-darwin 1.2.4

pkgs.python314Packages.pyosohotwaterapi

Module for using the OSO Hotwater API

nixos-unstable 1.2.4
- nixpkgs-unstable 1.2.4
- nixos-unstable-small 1.2.4

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>